[Remote] Cloud Network Engineer
Note: The job is a remote job and is open to candidates in USA. Catapult Federal Services is seeking a Cloud Network Engineer to support the US Department of the Treasury's TCloud enterprise cloud development effort. This role involves managing the configuration, installation, and ongoing support of the network infrastructure, including cloud platforms like Azure and OCI, while ensuring security and performance requirements are met.
Responsibilities
- In-Depth knowledge and hands-on experience with major cloud platforms, such as Azure, OCI and GCP
- Comprehensive knowledge of cloud security best practices and ability to implement security measures within cloud networks
- Strong understanding of networking protocols and technologies, including TCP/IP, DNS, DHCP, VPN, BGP and OSPF
- Strong understanding of Virtual Private Clouds (VPCs) and subnets to meet the organization’s performance and security requirements
- Experience with software-defined networking (SDN) and virtual networking concepts
- Experience with identity and access management (IAM) in cloud environments
- Experience with installation of various network devices and services (e.g., routers, firewalls, load balancers, VPN, QoS)
- Perform network maintenance and system upgrades including service packs, patches, hot fixes, and security configurations for any third-party network devices in cloud platforms
- Work with the existing network administrators and engineers to manage, deploy, and troubleshoot firewalls, routers, VPN concentrators, and Network Access Control in cloud platforms
- Monitor performance and ensure system availability and reliability
- Monitor system resource utilization, trending, and capacity planning
- Provide Level-2/3 support and troubleshooting to resolve issues
Skills
- Must be a US Citizen with the ability to obtain a Public Trust clearance
- Bachelors degree and seven 7 years or more of related experience or Masters and four (4) or more years of related experience
- Strong experience working with Terraform
- Need to have experience with AWS Security group deployment using Terraform
- Experience with cloud or on-prem devices such as Cisco and Palo Alto firewalls
- Working technical knowledge of TCP/IP networks and standards (IEEE 802.1)
- Must have experience with EKS Cluster
- Working knowledge of DoD STIGs, and IA Vulnerability Management (IAVM)
- Experience with Palo Alto firewalls
- Experience configuring and troubleshooting Cisco IPsec (AES 256), Firewall, IPS, route-maps, and NACLs
- Strong knowledge and understanding of TCP/IP network technologies; DNS, DHCP, TFTP, NAT, and SSL
- Participation in 24/7 on-call rotation is required for this role
- Azure Fundamentals, GCP or Oracle Cloud Certifications
- CCNP or Higher (CCIE and/or CISSP highly valued)
- PaloAlto Networks Certifies Network Security Engineer (PCNSE)
Company Overview